CrowdStrike
CCFR-201B · Question #7
The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?
Sign in or unlock CCFR-201B to reveal the answer and full explanation for question #7. The question stem and answer options stay visible for context.
Detection Investigation and Triage
Question
The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?
Options
- AThe Process Activity View creates a consolidated view of all detection events for that process that
- BThe Process Activity View will show the Detection time of the earliest recorded activity which
- CThe Process Activity View only creates a summary of Dynamic Link Libraries (DLLs) loaded by a
- DThe Process Activity View creates a count of event types only, which can be useful when scoping
Unlock CCFR-201B to see the answer
You've previewed enough free CCFR-201B questions. Unlock CCFR-201B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Process Activity View#detection events#event analysis#process investigation